Introduction

Level 5 and Level 6 in TRY2HACK requires the system library in the older version of Window operating systyem. While I'm using a Window 10 is not convenient to execute those two program, I skipped those two levels. (A solution for the incompatible version of operating system is using virtual machine.) These two levels mainly require the correct decompiler and DoDi's Visual Basic 4 Decompiler is quite a good choice.

Level 7

First, the browser check may be the checking of user agent in the HTTP header. There are various tools can be used including OWASP. browser check Microsoft Internet Explorer 7.66 If you are using a Google Chrome, search for "chrome user agent" and User-Agent Switcher for Chrome - Chrome Web Store - Google will appear. User-Agent Switcher for Chrome After installation, right click on the icon of this extension, select option, and modify the version from 7 to 7.66. Option of the extension After modifying the version for Internet Explorer, click on the icon of the extension and change to Internet Explorer 7. Change the version of browser Oh! There goes another OS check! OS check Returning the user agent editting panel, you can see there is a portion of the string containing the information of operating system. Change Windows NT * ti Linux. Change the informantion of operating system Link check can be seen as a check in the field named referer of the HTTP header. Link check Search for "chrome referer control". After installation of this extension, right click on the page, select "create referer fliter to the site" and "open option", paste the url of level 7, and select custom to add a referer host. referer host Success! There comes the link to the next level. success

Conclusion

The techniques needed in this level are
  1. HTTP header fields
  2. User-Agent
  3. Referer
There are in fact various ways to modify the HTTP header of a request for the webpage. Here I only show one of them. There are also powerful browser extension in Firefox can manipulate and intercept browser request packages.

History

Reference

  1. DoDi's Visual Basic 4 Decompiler
  2. OWASP
  3. Google Chrome
  4. User-Agent Switcher for Chrome - Chrome Web Store - Google
  5. What is the standard format for a browser's User-Agent string?
  6. List of HTTP header fields